Glossary: Web App Security and Authentication

Ownership check

Code that confirms a record belongs to the signed-in user (or that the user may read any) before returning it. It is the fix for IDOR.